Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: gUQbe0uPha0ax2FOmcSogqlbcki6ZtVsv7iQcYaYJL4=
Subject key identifier: 76:B9:9F:88:CC:4B:27:15:AE:A7:0D:BE:B0:7B:01:19:1B:6E:C8:69
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 0197B5FBD3E93813B7E73E53BFEB6C6A0867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 06CF
Signing time: Sat 28 Jun 2025 10:01:09 +0000
Manifest this update: Sat 28 Jun 2025 10:01:09 +0000
Manifest next update: Sun 29 Jun 2025 10:01:09 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: Yd3BtqAJw8rEqJMYOQ/rLsaLIlrYFu6OMd9et4AkqJE=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d3:e9:38:13:b7:e7:3e:53:bf:eb:6c:6a:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 28 10:01:09 2025 GMT
Not After : Jun 29 10:01:09 2025 GMT
Subject: CN=76b99f88cc4b2715aea70dbeb07b01191b6ec869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:d7:63:77:4f:ab:35:eb:c2:92:e9:fc:07:
0e:29:34:3b:d0:ea:1a:72:15:c4:d6:1b:c2:6a:6d:
dc:fb:de:c4:de:e4:89:81:1d:72:68:da:53:e8:4b:
46:47:0b:f3:36:f4:71:af:6e:50:f9:9f:e7:8f:94:
8f:f1:07:c9:6a:e2:05:1b:46:3e:3e:63:0c:95:a3:
88:b8:f2:1d:3b:e7:66:e4:3f:aa:ab:47:12:26:f7:
76:70:d4:fb:8a:7e:7c:d3:b1:a1:b1:9c:93:46:b9:
0d:ec:01:fb:e4:b7:c2:10:27:a4:1d:a9:c5:d9:fc:
64:2c:39:4f:af:16:9d:19:ed:d9:69:29:ae:72:d6:
20:5e:56:db:bf:85:33:00:ff:40:90:54:28:98:b8:
dd:ea:dc:4d:19:32:5f:2b:ec:91:a0:e5:0b:21:cd:
f5:86:2b:fa:a0:77:4d:9f:06:e4:3f:2e:c4:dd:8a:
77:56:40:e9:4c:5a:d9:e7:1a:13:4a:15:6d:39:c9:
53:16:80:74:4b:89:c8:50:cb:b5:57:5e:ef:84:db:
1c:63:2a:67:a7:d5:4a:e5:0a:1e:84:92:49:7a:7e:
45:2e:9e:51:ed:86:61:9d:a2:df:b3:7d:96:c2:27:
25:b4:8c:7b:74:58:17:c8:87:cc:4b:58:98:13:e9:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B9:9F:88:CC:4B:27:15:AE:A7:0D:BE:B0:7B:01:19:1B:6E:C8:69
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:b3:49:b8:bc:81:9f:7f:6a:e2:04:5c:a8:a9:e8:a1:25:
da:b0:45:a9:7e:c9:6a:1e:78:df:91:22:d5:1f:12:86:f3:42:
3f:70:7d:32:9e:27:75:71:7d:0d:bb:94:fd:86:b6:04:32:9d:
c8:c8:31:6e:16:37:25:30:5a:82:c2:4c:14:d5:7a:cb:e8:ba:
1f:0f:16:34:d7:56:29:77:0f:32:0b:91:b6:db:20:f3:49:44:
c7:dc:95:21:96:e2:44:5c:c1:27:d0:c2:fe:57:9f:8f:f1:2a:
11:5a:df:7e:f1:5d:b1:8f:5b:04:f0:50:74:24:0d:d7:20:9b:
b5:af:96:bc:f0:b2:d3:0c:23:88:3b:1b:ca:af:3e:44:0d:1a:
82:c2:76:21:04:0f:c1:a8:3d:8f:07:97:b9:61:d8:de:a1:81:
a7:6d:d1:b1:2b:ae:87:a3:ae:2d:46:8a:d0:d0:20:47:93:1f:
c0:cc:15:76:bd:e0:e7:12:f7:88:15:a4:0d:ee:34:69:43:b1:
49:2e:27:f5:d6:c1:f8:55:79:cb:eb:98:52:44:f7:91:4c:33:
34:7b:4f:68:05:28:3f:6d:1e:f6:2a:da:12:c6:e2:b4:bc:84:
99:b3:37:79:60:32:04:00:47:70:a5:ee:23:8c:bc:59:55:ee:
6f:35:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:14 2025 by rpki-client